diff --git a/AusweisApp2.spec b/AusweisApp2.spec
index f6f52e9..a3af0ba 100644
--- a/AusweisApp2.spec
+++ b/AusweisApp2.spec
@@ -85,6 +85,9 @@ Provides:         %{lc_name}%{?_isa} = %{version}-%{release}
 Requires:         %{name}-data       = %{version}-%{release}
 Requires:         (%{name}-doc       = %{version}-%{release} if %{name}-doc)
 
+# Needed for running fipscheck on application startup.
+Requires:         fipscheck
+
 %description
 The AusweisApp2 is a software to identify yourself online
 with your ID card (Personalausweis) or your electronic
@@ -143,6 +146,10 @@ install -pm 0644 %{SOURCE1} LICENSE.en.txt
 # Create the shell wrapper.
 cat << EOF > fedora_%{name}_wrapper.sh
 #!/bin/sh
+/usr/bin/fipscheck %{_bindir}/%{name} \\
+  %{_datadir}/%{name}/config.json \\
+  %{_datadir}/%{name}/openssl.cnf \\
+  %{_libexecdir}/%{name} || exit 1
 OPENSSL_CONF=%{_datadir}/%{name}/openssl.cnf \\
 %{_libexecdir}/%{name} "\$@"
 EOF
@@ -260,6 +267,7 @@ desktop-file-validate %{buildroot}%{_datadir}/applications/*.desktop
 %changelog
 * Sat Sep 26 2020 Björn Esser <besser82@fedoraproject.org> - 1.20.2-7
 - Calculate fipshmac for config files and shell wrapper
+- Run fipscheck in shell wrapper before application starts
 
 * Fri Sep 25 2020 Björn Esser <besser82@fedoraproject.org> - 1.20.2-6
 - Use a python script to generate a tailored OpenSSL configuration